Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: lJBlVcJPAH2JFmMXrpJahpd149RF9NaoXlAEBSbt+vc=
Subject key identifier: 37:FC:DC:AB:8D:37:74:DE:17:6C:B7:9B:BB:57:06:9A:67:0E:BD:22
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 01974742E876ABBC4A6B9715D1ABA404A3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1294
Signing time: Fri 06 Jun 2025 22:00:56 +0000
Manifest this update: Fri 06 Jun 2025 22:00:56 +0000
Manifest next update: Sat 07 Jun 2025 22:00:56 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: ucHKEepDMnS0+7Trhow6aYjPeuCC243eHSKYkwrsODc=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e8:76:ab:bc:4a:6b:97:15:d1:ab:a4:04:a3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jun 6 22:00:56 2025 GMT
Not After : Jun 7 22:00:56 2025 GMT
Subject: CN=37fcdcab8d3774de176cb79bbb57069a670ebd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:13:f0:45:86:2d:65:0c:5c:cb:e0:a4:0e:
a5:ef:07:fb:ea:45:b8:0e:5e:e5:ec:86:e7:ea:e8:
f0:cb:cf:3e:1b:8c:2b:93:ca:e7:46:f6:e6:02:18:
40:c8:64:47:eb:4a:a9:67:2b:f2:17:04:9b:32:0f:
2b:d3:32:b4:0b:ca:78:15:95:09:70:26:65:7f:b0:
3b:dc:36:7c:ad:e1:eb:10:c1:e4:f6:e3:2c:fa:a1:
d9:b2:9a:b4:83:87:59:cf:f0:70:fc:fc:de:f1:c1:
7e:61:97:f2:bb:e6:b1:e4:a1:64:b6:d3:fe:ef:5b:
db:5a:74:b3:70:be:d9:26:97:4c:48:ee:8b:1e:a5:
f2:31:05:57:87:47:01:bc:d7:d5:5a:22:cb:6d:13:
91:67:a4:a1:e5:cd:39:8c:20:f3:0c:5f:b7:64:7a:
e3:14:49:d8:ff:ec:66:5e:2a:9d:21:e0:d3:98:50:
d0:22:bb:70:c3:23:11:47:e6:85:cf:23:dd:b6:de:
dc:5f:f0:b1:13:00:41:60:10:29:5f:43:86:d1:7e:
91:c2:f1:6e:d5:75:20:d0:88:97:5b:82:da:bf:3b:
14:18:40:97:2d:91:92:7a:2e:11:25:ce:6b:af:ba:
b4:d2:01:2c:5e:cd:fd:63:b0:71:c4:58:a6:0b:00:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:DC:AB:8D:37:74:DE:17:6C:B7:9B:BB:57:06:9A:67:0E:BD:22
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:21:fb:25:97:fb:71:3e:db:6d:ae:1d:eb:ce:b5:dc:06:96:
4c:69:d8:c5:20:11:c6:06:b6:30:40:41:17:53:f6:ea:bf:72:
ed:aa:08:48:28:be:fa:ea:b8:02:3e:b6:68:ba:c3:f3:b6:bc:
1e:56:b2:62:51:07:a3:3f:0a:ad:74:b0:aa:33:09:62:43:2f:
65:20:da:62:0d:5b:a0:3b:82:80:fe:e9:32:be:9a:ff:52:dd:
96:1d:a8:86:bf:35:b5:48:12:80:73:75:f2:16:bf:9b:b7:e5:
0e:7c:b7:47:6b:2d:58:a1:a6:46:bb:e8:51:80:81:6c:9a:eb:
11:b1:03:ff:20:19:36:cf:09:25:49:60:78:d1:a3:10:64:20:
1b:43:39:ac:72:b2:bc:cb:dc:09:94:81:c1:08:12:38:eb:84:
d8:96:d4:7d:a3:f5:d8:6b:ad:02:94:09:e3:9d:42:d9:65:58:
3b:cf:f2:34:95:8e:f4:66:79:be:03:d3:80:2c:fa:bb:28:8f:
62:84:59:78:3e:d6:2b:99:bc:00:5e:de:4c:7c:41:da:8e:7e:
17:c4:3c:9d:87:05:0f:a4:57:bb:cb:63:cd:92:f5:c5:51:01:
04:d8:7e:df:3d:b5:c9:9d:79:86:ba:95:bc:39:7b:5f:c7:9b:
a2:54:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:33 2025 by rpki-client